Privacy policy

Paperstash helps Canadian families keep receipts for tax time. Receipts can include health information, so we collect as little as we can and use it only to run the service.

What we collect

• Your Google account name, email address and profile picture, when you sign in.
• Details read from your receipts: store or provider, dates, amounts, items, and the name printed on the receipt. You and your household can see and correct these.
• Household information you enter: names of family members (including children who do not have an account), relationships, and businesses.

Where your receipts are kept

Original receipt images and PDFs are saved in the Google Drive of your household's manager, in a folder Paperstash creates. Paperstash uses Google's drive.file permission, so it can only see files it created. It cannot see anything else in your Drive. Deleting the folder in Drive deletes the originals.

The details read from receipts are stored in our database so they can be searched, totalled and reported. Google sign-in tokens are stored encrypted.

Who processes your data for us

• Vercel hosts the app.
• Neon hosts the database.
• OpenAI or Anthropic reads receipt images to pull out the details. Images are sent only to read the receipt, not to train AI models.
• Resend sends emails such as household invitations.

These providers may store or process data outside Canada, including in the United States. We do not sell your data or use it for advertising.

Google user data

Paperstash's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to sign you in and to save and read your household's receipt files.

Sharing within your household

Everyone with a login in your household can see all of its receipts and reports. Only managers can verify receipts and change the household.

Your choices

Under Canadian privacy law (PIPEDA) you can ask to see, correct or delete your personal information. Email hello@paperstash.io. You can also remove Paperstash's access at any time from your Google account's security settings.

Changes

If this policy changes in a way that matters, we will tell you in the app first.